News Feed
  • DrugHub has agreed to fully refund all users who lost money in the SuperMarket exit scam.  
  • Retro Market has gone offline. Circumstances of the closure unknown.  
  • SuperMarket has closed following an exit scam by one of the admins.  
  • The admin of Incognito Market, Pharoah, has been arrested by the FBI several months after exit scamming.  
  • Silk RoadTorhoo mini logo
  • darknet markets list
  • Popular P2P exchange LocalMonero has announced it is closing.  

ok, so you used the auto encrypt on arch : CafeDread | Torhoo darknet markets

If admin is cooperating, could those messages be decrypted? Or, if working properly, are they still just decrypted using both you and vendors key, which LE couldn't do no matter what?

I know, always encrypt yourself.
I think my first order I didn't, second order I did.. second order finalized 9 days before seizure.
/u/Exoduz P
6 points
3 weeks ago
ALWAYS ALWAYS ALWAYS use PGP even if it says it's using it's own PGP to disguise your communications. Auto -encrypt is of almost ZERO help at all.

This is because if you use PGP on ALL your communications that you have control over than you can atleast be 100% sure you did your best to obfuscate you dirty little deeds!

Do not leave your self open by relying on others to perform the proper obfuscation or general OpeSec FOR YOU! PLEASE, at every turn perform your own opsec, whenever, however you can.

Even when inside of messengers like sessions or signal and you send your drop address to someone, PGP encrypt that shit. Sure maybe signal and sessions (the app names are arbitrary and here to serve as context) might be encrypted but what happens if the guy or gal on the other end has really shitty OpSec habits and doesn't have a password on his phone or computer much less disk encryption or anything else. OR EVEN IF HE DOES have all of that but he gets caught and the authorities go through all of shit shit. If you did not use PGP than it's open season on your drop info and other important shit. General conversations don't matter as much if they don't know who you are.

Live by a small set of rules you build for your self. Each rule adding more buffer between you and the world around you. Use what has been learned through the experience and hardships of others. As well as some good'ole common sense. Always ASK, and VERIFY. Always ENCRYPT and keep your personal touches to a minimum. You don't want to be finger printed.

TL:DR: Anyway, I will leave it at that. Always use PGP and always assume someone is listening or can listen and always assume you can never trust anyone fully.

Stay safe, stay liquid and STAY FROSTY!

Regards,
💊 ËxØÜ 💊
/u/pgpfreak P Biker Babe 🏍️
3 points
3 weeks ago
Solid advice. Can't resist to promote /d/pgppractice for free tutorials and training.
/u/Silent_Cal P
1 points
3 weeks ago
I second this. Helped me learn a bit, and understand a lot better than the youtube vids I watched on PGP.
/u/[deleted] 📢
1 points
3 weeks ago
It's good advice, but what if not followed in the past? Can law enforcement do anything without a controlled delivery or catching you in possession of said illegal drug?
/u/Exoduz P
1 points
3 weeks ago*
Past sins really depend on what tier of "criminal" you are, what "substance" or "items" you "traded" or "sold" in, as well as for "how long" you did so. There are other things as well they'll take into consideration but these are the ones that will likely mean the most. Authorities will take all of these things into consideration and will categorize you based on these and other attributes and save you as a variable with a value. The value is always on a spectrum.

EXAMPLE: NOTE: These are just examples to give you an idea of how much you should worry but I am also NO professional law enforcement officer or lawyer or agent of either the law or court system. I am simply here to offer you the best advice or info I can according to the information you give me and based off off of what we have seen in the past as far as what LEO and the FEDS have typically done for things similar in nature to what you have done.

First off, before you go down the route of freaking out 24/7 we need to know, at least partially, your "variable value". The simplest way to at least get an idea of where you are on the spectrum this is by answering the following questions. Which of the following fit your past deeds (the deeds causing the worries) more adequately.

ANOTHER NOTE: These are PAST sins we are talking about. If you stopped when the market or vendor went down that is much different than if they think your still active or know you are or know your other market identities. Also THE FOLLOWING LIST is JUST an EXAMPLE to help me guide you and give you better information.

  • 1.) You're a college kid buying 100 Ambien (zolpidem) sleeping pills each month and you say as much in your correspondences with the compromised vendor or compromised market.
  • 1a.) Same as above but you buy 100 to 200 bars a month for personal anxiety.
  • 2.) You're a hard working student who needs multiple monthly purchases of Adderall to stay 100%.. Maybe your correspondences with any compromised vendors/markets that LEO has access to will also indicate this. you'll be classified, hopefully, as a user not a dealer. NOTE: Users will have less priority and a lower variable value and be lower on the variable spectrum than dealers but still not in the clear. (I hope you are still following along.)
  • 3.) You are trying to make some extra cash selling weed, mushrooms, and other somewhat or mostly decriminalized items. This will depend on the size you purchase and how often.
  • 4.) You buy a k-pack, 1,000 bars, once or twice a month for resale resale.
  • 5.) You want to make money so you started buying and selling drugs like MDMA, LSD, KET,, and other Schedule 1 drugs and at an elevated rate. You are selling a few ounces of each per month. Not a casual 10 strip buyer and user.
  • 6.) Your selling Counterfeit Roxy 30's, METH, COC, FENT (Any FENT for resale even low amounts is gonna put you higher up on anyone's list)
  • 7.) Identity Theft of any kind will automatically put you in a category of priority but there are a lot of variables to consider. There are still lots of other bigger fish but they may save you for a rainy day.
  • 8.) You sale buy counterfeit currency like counterfeit $100 USD bills. If your not the one printing them your less a threat but the FEDS don't take that shit lightly.
  • 9.) Lastly if your buying $2,000-$5,000 a month of anything meant for resale your going to be at the top of the list.
  • 10.) There are plenty of other items that could be on this list but this is already a long post. It is designed to get a point across.


Exactly what the value of your variable is will depend on all of the above plus other obvious and not so obvious things you may have done or said within those correspondences. This is where the challenge is for LEO/FEDS

Challenges for Law Enforcement:
  • 1.) Anonymity and Encryption: The dark web and cryptocurrencies can make it difficult to identify and track individuals.
  • 2.) Jurisdictional Issues: Investigating online drug trafficking can be complex due to the cross-border nature of the activity.
  • 3.) Evolving Technology: The rapid evolution of online technology requires law enforcement to stay updated with new methods used by criminals.
  • 4.) Volume of Activity: The vast amount of drug trafficking on the dark web can be overwhelming for even the most well-resourced agencies.


In summary, law enforcement agencies use a combination of traditional and technological strategies to investigate online drug purchases, but they face challenges related to anonymity, encryption, and jurisdictional issues. Assuming you used any of these.

TL:DR: It REALLY depends on "how much" of "what were you buying" and what your "intent" was with the items you bought. Your open correspondences that were not encrypted will be used to place you at a particular level of priority. Given the amount of traffic Archetyp saw and all the very very large fish, I doubt you got much to worry about unless you are a big fish who talked to much and didn't encrypt anything. The past is the past. However your past Illegal Activity, Statute of Limitations, any current Federal Investigation, Evidence Discovery, and if you made Admissions of Guilt will also ultimately be at play.

Care to elaborate on where you think you fall within the spectrum and what your variable value might be?

Regards,
💊 ËxØÜ 💊
Pending mod
/u/Exoduz P
1 points
3 weeks ago
\o/

💊 ËxØÜ 💊
what botheers me is that auto-encrypt never actually showed the message encrypted, making me believe it wasnt to begin with
/u/pgpfreak P Biker Babe 🏍️
1 points
3 weeks ago
You mean you were still able to see the message AFTER it was send?
yep lol. thats how I learned that auto-encrypt is a huge fucking nono
/u/pgpfreak P Biker Babe 🏍️
2 points
3 weeks ago
Interesting. Then it means it's either:

  • Auto-encrypt was working but included the market key as a recipient (so messages could be displayed later on);
  • Or auto-encrypt just didn't work.

It doesn't make a difference since we know BigBoss lost their keys to LE.
So... Yeah. /u/imessedupbigtime25 I didn't have this information before, but there a strong possibility your address has been leaked. I'm not saying it for you, though. You won't be investigated for a couple of hundreds order. It's nothing. I'd be surprised if you receive even a love letter. You seem like a decent guy but you're stressing a lot too much and/or trying to push a crypto thing I'm not interested in. Stop eating yourself and others with this.
/u/[deleted] 📢
1 points
3 weeks ago
I don't remember but I feel like that would stick out if what Mike said was true. I remember sending repeated encrypted messages making sure my address was readable because I am a now retired pgp newbie (im not doing the markets anymore, too stressful)

So I don't have any evidence to the contrary, but I just don't feel what Mike said was the case all the time.

I'm worrying because the on ramp was kyc, I have to explain SOMETHING eventually..and there's nothing stopping local le from taking it, unless they need physical evidence which they won't have
/u/niggerFPO 🍼
1 points
3 weeks ago
this is another reason you should not send cyrpto without breaking links b/w KYC exchanges.

next time leverage multiple cyrpto currency anonymous nature and blockchain hops make it harder for them. If you make it hard for them to track a user for buying 500$ worth of drugs, they wont spend twice as much to find out who you were.
/u/[deleted] 📢
1 points
3 weeks ago
Free you..DM me if needed
/u/[deleted] 📢
1 points
3 weeks ago
Not trying to annoy anybody either. Just trying to stay safe
/u/[deleted] 📢
1 points
3 weeks ago
It showed the encrypted address for me for sure.. I remember verifying in clear text they were able to read my message even when attempting to self encrypt
/u/[deleted] 📢
1 points
3 weeks ago
When was this? Because I vividly remember verifying in regular messages that the message was deceypted properly
/u/PayThePiper
1 points
3 weeks ago
AutoEncrypt was never end-to-end in storage. All messages remained in clear text on the database and were only encrypted when packaged for delivery to you. In other words, while you and the vendor each hold keys to decrypt the transmitted payload, the original content sat unencrypted on the server, and any cooperating admin (or legal request) could access those plaintext messages directly.
Pending mod
Kinda funny this comment was also pending. Approved now but the other post above yours was approved first so no one saw your 'Pending mod' comment before seeing the other comment.
/u/pgpfreak P Biker Babe 🏍️
1 points
3 weeks ago
All messages remained in clear text on the database

You can't prove that. And you don't understand how PGP works. Stop pretending.
/u/PayThePiper
1 points
3 weeks ago
okay...
/u/[deleted] 📢
1 points
3 weeks ago*
According to admin, unencrypted messages were stored temporarily in ram until the order was processed
Pardon I don't know how to share the exact post but can be found here as well as his quote:


"/u/BigBossChefOfArchetyp P 1 points
1 year ago
What you enter in cleartext is only stored in RAM so deleted right after being processed, however the encrypted output is stored till the order gets deleted. You should encrypt yourself."
/post/7f3d7a9c7b486f3152d6/#c-748327b9ef1623fdb5
/u/[deleted] 📢
1 points
3 weeks ago
Aha. Thanks
so your comment won't be seen unless you edit it.
/u/hearts
1 points
3 weeks ago
I think the only thing you really necessarily have to worry about is manually encrypting your address (duh) and encrypting sensitive communications. Obviously PGP everything, but if you did that bare minimum described in the first sentence, you should be fine.
/u/[deleted] 📢
1 points
3 weeks ago
I think my very first order I didn't, but my subsequent orders I tried.. I remember because I was having trouble decrypting replies. But had no trouble encrypting mine
/u/hearts
1 points
3 weeks ago
Depending on when your very first order was, you should be fine. If it was like a year or more ago, it's unlikely the records still exist and you'll be okay. I'd be more wary if it was within the last couple of months because no one knows the level of access agencies had leading up to the seizure. Plus if you're simply a regular buyer, while there's still a minuscule chance of being caught, it's highly unlikely considering their main targets are market owners, vendors, and bulk buyers.

I even had a slip up when I placed my first order on Archetyp over a year ago and didn't manually encrypt and I was fine. I still at least PGP'd my comms in that situation, and moving forward manually encrypted my address. Haven't had any issues at all from that and have had packs land consistently.
/u/snowbunni P
1 points
3 weeks ago
Basically everyone should get another drop now. Maybe use PO Boxes and NOT tied to your original address!
/u/hearts
2 points
3 weeks ago
If you used proper opsec and consistently PGPd your comms you should be fine, all that would be warranted is maybe a cleaning of house, unless you're a vendor.
/u/pgpfreak P Biker Babe 🏍️
2 points
3 weeks ago
This. If you did encryption yourself there's a strong probability your drop is perfectly safe. I'd understand vendors and bulk buyers taking extra precautions though.
/u/hearts
1 points
3 weeks ago*
[removed]
/u/pgpfreak P Biker Babe 🏍️
1 points
3 weeks ago
I'm not sure I can give a valuable answer. I thought Archetyp was legit enough to properly manage auto-encrypt but it seem I was wrong /post/7989b5d7bfc3fa1413ef/#c-a6ec5dd1e6ec6a215f. It doesn't prove LE will be able to get hold of a one-year old message. You can speculate expired messages were properly deleted, or that the market used throwaway keys for auto-encrypt, or that LE didn't get hold of all BigBoss keys, or that they didn't care. But. That's betting your safety. If I were you I'd assume messages were seized. Doesn't mean you'll get in trouble either. As far as I know, buyers are rarely investigated. OP is worrying about a small sum and I'm confident they won't get in trouble for it. However in the end it's up to you to evaluate the risk.
/u/snowbunni P
1 points
3 weeks ago
Vendors use tor and have proper opsec in place :)
/u/[deleted] 📢
1 points
3 weeks ago
So true, but I think I'm retiring after my long illustrious 1 month career. I didn't do proper opsec, learned my lesson, shouldn't have jeopardized those whom I'm responsible for financially, and will just struggle with my crippling anxiety when the bottle is empty.
/u/snowbunni P
1 points
3 weeks ago
Best of luck!
/u/[deleted] 📢
1 points
3 weeks ago
Thank you